| शीर्षक | wix-incubator jam 0.0 Improper Neutralization of Special Elements Used in a Template E |
|---|
| विवरण | Jam, a tool for generating static HTML files, has a Server - Side Template Injection (SSTI) vulnerability. The lack of proper input validation in handling template data allows attackers to inject malicious Jinja2 code at jam.py. They can either directly insert malicious code into the config['template'] in a YAML file or use a malicious URL in template['url']. This can lead to information disclosure and remote code execution attacks.
More details: https://github.com/wix-incubator/jam/issues/1 |
|---|
| स्रोत | ⚠️ https://github.com/wix-incubator/jam/issues/1 |
|---|
| उपयोगकर्ता | ybdesire (UID 83239) |
|---|
| सबमिशन | 10/04/2025 03:19 PM (1 वर्ष पहले) |
|---|
| संयम | 21/04/2025 03:07 PM (11 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 305769 [wix-incubator jam तक e87a6fd85cf8fb5ff37b62b2d68f917219d07ae9 Jinja2 Template jam.py config['template']] |
|---|
| अंक | 20 |
|---|